Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/41a07318-e8fa-3ac5-b121-6abc01fbca05.roa
File:                     41a07318-e8fa-3ac5-b121-6abc01fbca05.roa (raw, json)
Hash identifier:          JQv86aci9rfcSzmcnB2JnG7hsVhLMFDjeJkkWZtm1Wg=
Subject key identifier:   72:82:DA:AD:D2:D3:92:78:01:E8:3E:44:03:49:03:CF:94:6C:FC:F3
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584B758CAC22F3499488F5C70B80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/41a07318-e8fa-3ac5-b121-6abc01fbca05.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     7018
IP address blocks:        142.111.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:ac:22:f3:49:94:88:f5:c7:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=b5458113-7c0c-497a-b439-a01a4e9b0c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:be:5c:ff:ae:fc:1d:96:6a:ae:83:0a:da:4b:
                    c0:d2:94:e9:c5:c1:78:77:44:47:f2:fe:7f:f7:2d:
                    81:81:63:93:29:1a:b9:04:ab:e8:d9:9b:75:2c:17:
                    36:5e:ab:62:c1:35:03:6c:06:66:d8:a8:ea:fc:42:
                    28:69:a6:32:89:67:a3:99:a0:0f:1c:1b:cf:e8:58:
                    ac:43:68:13:41:8b:45:21:93:61:a9:06:a4:b8:32:
                    a4:0b:38:b1:5a:9f:be:9d:f2:bc:47:a5:76:5a:d3:
                    19:cc:6f:c1:b5:7e:d3:89:2d:35:43:8c:a8:67:a6:
                    29:13:67:e4:07:70:72:67:8b:3a:9c:7e:74:ec:89:
                    37:bd:5f:c1:52:bb:de:28:96:eb:00:42:c3:64:26:
                    6c:d4:f0:d0:af:86:ec:48:c7:a9:b8:6f:09:77:20:
                    44:c7:13:ee:a1:d8:48:c9:ab:01:e5:20:f1:ea:7a:
                    5e:0e:ab:a9:88:62:f8:54:49:17:19:6a:c1:f2:34:
                    80:31:1e:08:09:4d:ef:12:97:4a:20:f7:75:37:4b:
                    4c:26:17:16:5d:d2:5a:da:25:46:b4:80:95:7b:8a:
                    20:be:10:cb:04:ab:fc:b5:42:c4:cd:cf:c4:35:d9:
                    85:1b:de:ea:96:3e:04:9d:98:9b:7c:82:51:20:a4:
                    a2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:82:DA:AD:D2:D3:92:78:01:E8:3E:44:03:49:03:CF:94:6C:FC:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/41a07318-e8fa-3ac5-b121-6abc01fbca05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:96:29:13:7d:4b:33:b3:fc:13:23:e6:6b:c4:89:c5:46:8d:
         bb:a5:ec:88:11:d2:02:96:93:fa:07:30:d0:cf:10:2c:bd:8d:
         e1:9b:dc:2d:a3:9d:47:45:7f:00:f9:b5:79:67:c7:93:3f:38:
         f7:5f:7a:42:e9:fc:23:65:a3:50:46:09:7a:7f:26:59:f8:0a:
         0c:8a:b1:9d:fc:6a:97:86:15:0a:c3:9e:7f:dd:50:ca:c9:8f:
         ac:1b:15:29:a8:51:f1:c5:54:14:30:58:bd:a2:bf:29:b8:1b:
         69:b5:49:a0:ac:3c:2e:09:da:eb:95:20:a5:46:2b:75:1a:33:
         4a:af:b4:47:94:43:a9:7d:39:d4:67:10:a1:82:cb:3f:97:bc:
         46:49:59:be:15:2f:f1:ad:16:a9:e3:62:44:05:f6:f5:62:a7:
         64:7f:52:69:1e:f7:0a:6d:c1:d4:d4:08:09:c6:48:10:f4:3e:
         4d:f1:39:fc:21:e2:42:90:79:a7:cb:30:7c:d8:e9:98:45:da:
         e0:e7:b9:db:4c:27:45:e7:ac:5c:60:f1:a3:c0:b7:01:70:3d:
         86:0a:bb:72:a1:a9:b9:9c:fa:7e:80:59:2e:7b:74:76:49:0c:
         25:d4:65:71:99:cb:71:c1:a4:f9:36:b4:67:23:af:40:a9:fd:
         0a:63:0f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:44:18 2025 by rpki-client